From 7c0ca42145f0f056a6916d002cffe445ce526152 Mon Sep 17 00:00:00 2001 From: Joshua Tauberer Date: Tue, 3 Mar 2015 11:47:00 +0000 Subject: [PATCH] status checks: don't check that dovecot-sieve is publicly accessible --- CHANGELOG.md | 7 +++++++ management/status_checks.py | 2 +- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 9e0577cc..d1afb86e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,13 @@ CHANGELOG ========= +In Development... +----------------- + +Control panel: + +* The new check that system services are running mistakenly checked that the Dovecot Managesieve service is publicly accessible. Although the service binds to the public network interface we don't open the port in ufw. On some machines it seems that ufw blocks the connection from the status checks (which seems correct) and on some machines (mine) it doesn't, which is why I didn't notice the problem. + v0.07 (February 28, 2015) ------------------------- diff --git a/management/status_checks.py b/management/status_checks.py index 70bdd412..16b40dab 100755 --- a/management/status_checks.py +++ b/management/status_checks.py @@ -64,7 +64,7 @@ def run_services_checks(env, output, pool): { "name": "OpenDKIM", "port": 8891, "public": False, }, { "name": "OpenDMARC", "port": 8893, "public": False, }, { "name": "Memcached", "port": 11211, "public": False, }, - { "name": "Sieve (dovecot)", "port": 4190, "public": True, }, + { "name": "Sieve (dovecot)", "port": 4190, "public": False, }, { "name": "Mail-in-a-Box Management Daemon", "port": 10222, "public": False, }, { "name": "SSH Login (ssh)", "port": get_ssh_port(), "public": True, },